Threats Tagged 'cve-2026-75759'
View all threats tagged with 'cve-2026-75759'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-75759'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-75759 is a high-severity vulnerability in erlef oidcc affecting versions from 3.2.0-beta.1 before 3.9.0. It involves improper verification of cryptographic signatures, allowing an unauthenticated attacker to impersonate arbitrary users by crafting encrypted ID tokens or JARM responses without nested signatures. The vulnerability arises because oidcc accepts unsigned encrypted tokens as valid, violating OpenID Connect Core 1.0 requirements that encrypted ID tokens must be signed then encrypted. UserInfo responses are not affected. No official patch or remediation level has been confirmed. Join the discussion | CVE Database V5 | 08/30/2026, 01:12:43 UTC Added: 08/30/2026, 01:37:41 UTC |
Showing 1 to 1 of 1 result